Note 1: When using “net user samAccountName /domain“, the value returned by “Password expires” doesn’t take in consideration the fine grained policies (net user samAccountName /domain is not reliable,you should rather use msDS-UserPasswordExpiryTimeComputed to get the correct and exact password expiration date).